CVE-2015-8606

CVE-2015-8606 affects SilverStripe CMS & Framework. Multiple XSS vulnerabilities exist in versions prior to 3.1.16 and 3.2.x prior to 3.2.1, exploitable via the Locale or FailedLoginCount parameter in admin/security/EditForm/field/Members/item/new/ItemEditForm. Impact is that remote attackers can...